Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: uySHG9LTd376bZNX6IrMqMlmE4w4IRbT9qwp3H3Mp/g=
Subject key identifier: 98:A0:A9:FC:74:64:B9:28:9E:D9:4B:FE:A8:47:14:4B:ED:A8:97:E4
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019E1D90EBE2261615F3AE665DAB86CDB3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0A21
Signing time: Tue 12 May 2026 19:01:37 +0000
Manifest this update: Tue 12 May 2026 19:01:37 +0000
Manifest next update: Wed 13 May 2026 19:01:37 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: OuMj6SffgvwbwwJ24ShA6RhdJY5cjxD1q3QNaaGuqYg=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:eb:e2:26:16:15:f3:ae:66:5d:ab:86:cd:b3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: May 12 19:01:37 2026 GMT
Not After : May 13 19:01:37 2026 GMT
Subject: CN=98a0a9fc7464b9289ed94bfea847144beda897e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:30:68:42:64:28:83:1a:5c:99:cb:41:de:
87:e3:10:2f:8a:eb:a1:06:15:26:2b:a7:f6:e6:ac:
de:57:f2:1e:ce:0c:d5:a0:7f:ab:c7:4d:04:2b:e0:
a9:94:2a:e3:45:15:89:d0:44:82:37:bb:53:2b:1e:
f5:b3:e7:3e:d4:79:b4:f9:fc:65:f5:50:6a:62:3f:
a1:0f:87:f7:da:40:57:cb:87:80:44:43:6e:7f:3f:
65:81:e2:4d:ce:48:8e:c8:3e:d2:7f:57:47:75:72:
54:4c:2c:df:80:ca:39:46:24:70:b1:76:99:1c:62:
f2:d6:b7:95:f6:cb:ff:a2:47:e5:f6:5e:86:98:67:
dd:df:25:d5:67:be:0c:73:56:e7:7e:25:45:ac:95:
ef:26:d6:e1:15:42:33:d5:90:1c:6b:2e:7b:a4:0a:
ba:df:b4:38:ae:36:ce:0b:dc:5e:39:0c:2b:8e:aa:
8c:48:02:09:8b:77:df:37:2c:d2:43:8d:98:8f:69:
69:b0:43:89:77:ca:5b:23:54:95:ae:da:13:11:bc:
ff:ad:2f:69:e4:31:3c:c3:90:77:0f:0a:44:d5:db:
14:32:fc:b1:61:97:88:f6:c5:97:a0:a9:9b:9f:8a:
af:20:20:cc:ae:f5:24:e3:29:92:de:be:a4:72:c0:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A0:A9:FC:74:64:B9:28:9E:D9:4B:FE:A8:47:14:4B:ED:A8:97:E4
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ee:4e:8b:4e:ad:dd:02:d9:bb:ed:c5:dc:11:a4:73:65:fd:
3c:9a:88:63:35:df:57:98:e1:70:6c:40:76:92:54:cf:4d:cb:
3f:d6:4a:d8:e3:73:b9:89:01:7e:7b:a5:63:7d:2c:04:99:34:
a0:03:ec:5e:ef:e7:a7:fc:a5:32:2e:62:07:a0:94:3c:79:e3:
42:3e:61:1a:9d:01:ac:4e:2e:d8:e3:5a:d9:4b:93:21:19:8a:
c4:ad:4b:e5:5f:cb:aa:78:b6:d8:45:0c:a9:2a:4a:3f:05:59:
1f:68:5a:eb:ff:f3:ba:59:29:bc:7c:46:2e:89:ec:1e:55:f7:
f9:ec:81:91:7e:7d:1a:6d:6d:bd:4f:ba:9a:4d:33:75:31:73:
8c:32:f0:72:01:3f:d8:1d:21:3a:2f:4b:45:83:82:ed:f9:46:
11:6a:65:9b:78:9b:f8:ae:2d:76:ca:11:28:01:80:f2:b3:d7:
b0:03:45:2f:70:fe:79:59:36:91:65:ac:31:c2:0b:da:32:22:
63:5c:f3:83:59:6f:89:d6:b3:b3:79:86:42:40:67:ea:73:b7:
f8:a2:89:ba:4f:a1:ea:91:34:5a:f9:e2:2c:c5:3c:45:d6:4e:
36:65:e8:59:42:3a:bb:16:fa:9f:5e:44:da:50:1b:ac:b8:f8:
a5:60:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:35:05 2026 by rpki-client